The Asian Development Bank (ADB) reports USD 23.0 billion of net foreign purchases across six emerging East Asian local-currency bond markets from May to July 2026. China received USD 12.1 billion and Korea USD 10.9 billion. The ASEAN markets covered by the data – Indonesia, Malaysia, the Philippines and Thailand – received combined net inflows of USD 0.05 billion.

In equities, capital moved in the other direction. Between 01 June and 31 August, foreign investors withdrew USD 68.1 billion from the six emerging East Asian equity markets covered by ADB’s data. Korea and China accounted for almost all of it. The four ASEAN markets in the dataset – Indonesia, the Philippines, Thailand and Vietnam – recorded combined net outflows of about USD 1.3 billion.

Capital is moving through emerging East Asia – ADB’s term for ASEAN plus China, Hong Kong and Korea – at scale. But in this three-month bond snapshot, the ASEAN markets captured almost none of the net inflow. For a fund manager, that is an exit-liquidity question. For a CFO, it is a funding-currency question.

The ASEAN+3 Macroeconomic Research Office (AMRO) frames the wider gap in its ASEAN+3 Financial Stability Report 2026, released on 5 October. ASEAN+3 means ASEAN plus China, Hong Kong, Japan and Korea.

The grouping accounts for roughly 30% of global trade but only 9% of global portfolio investment liabilities, based on 2024 data. The constraint is not economic size. It is financial plumbing.

Portfolio Integration Lags Every Other Link

Only 26.9% of ASEAN+3’s portfolio investment liabilities in 2024 were held by investors inside the region, according to AMRO. That sits far below the region’s intra-regional trade and direct-investment links.

Even that figure flatters the region. Hong Kong and Singapore intermediate substantial amounts of capital originating outside ASEAN+3. Part of the 26.9% therefore reflects global money routed through regional financial centres, rather than savings generated and allocated within the region.

ADB reaches the same conclusion on a wider base. Across its 50 Asia-Pacific regional members, financial integration remains the weakest dimension and trails the European Union plus the United Kingdom. In 2024, 22.2% of portfolio debt assets and 21.5% of equity assets were invested within the region.

Those shares edged higher during the year, but ADB’s broader integration indicators show that intra-regional financial links have declined since 2021.

Foreign direct investment builds a plant that may remain for decades. Portfolio money buys shares and bonds that can be sold in a day. A region rich in the first and thin in the second has patient production capital but shallower regional markets through which to price, finance and exit that investment.

The factory half of the headline has a basis. AMRO links ASEAN+3’s direct-investment integration to production and investment ties between ASEAN and the Plus-3 economies – China, Hong Kong, Japan and Korea. Within ASEAN itself, intra-ASEAN investment accounted for about 14% of FDI inflows in 2024.

Regional-Currency Funding Is Largely a Yuan Channel

ADB classifies debt as intra-regional issuance when an issuer borrows in the currency of another emerging East Asian economy. Total intra-regional debt issuance reached USD 17.0 billion in the second quarter of 2026. Excluding bills and other instruments with maturities of one year or less, issuance amounted to USD 11.8 billion.

The Chinese yuan accounted for 84.5% of total intra-regional issuance and the Hong Kong dollar another 15.1%. ASEAN issuers borrowed in another regional currency only through yuan and Hong Kong dollar-denominated instruments. Across emerging East Asia, 79.6% of intra-regional issuance had maturities of five years or less.

The measure needs careful reading. Hong Kong issuers supplied 76.2% of total intra-regional debt issuance during the quarter. The number therefore captures the offshore yuan market and Hong Kong’s role as an intermediary more than it demonstrates broad ASEAN-to-ASEAN lending.

For an ASEAN treasurer, borrowing in another regional currency effectively meant borrowing in yuan or Hong Kong dollars that quarter. The external-currency channel was considerably larger. Excluding instruments with maturities of one year or less, emerging East Asian issuers sold USD 60.5 billion of bonds denominated in US dollars, euros and yen; about five times the comparable USD 11.8 billion regional-currency total.

Size is not the obstacle. Emerging East Asia’s local-currency bonds outstanding, excluding securities with maturities of one year or less, reached USD 30.0 trillion in June 2026. That was equivalent to 108.8% of GDP, compared with 115.4% in the United States and 127.4% in the euro area.

China accounted for 85.2% of that total. The six ASEAN markets covered by ADB accounted for USD 2.0 trillion or 6.8%.

Europe’s Passport Waited 30 Years for Its Pipes

Europe introduced the Undertakings for Collective Investment in Transferable Securities framework, better known as UCITS, in 1985. Its pan-European securities-settlement platform, TARGET2-Securities, began operating in June 2015.

The fund passport initially received a lukewarm market response, which European authorities attributed partly to the absence of standardised frameworks for a single cross-border market.

ADB’s 2022 study on collective investment scheme transactions in ASEAN+3 was written by Satoru Yamadera of the Cross-Border Settlement Infrastructure Forum secretariat and Ki Hoon Ro of the Korea Securities Depository. They wrote that Europe viewed settlement “not as back-office plumbing but as one of the crucial game changers.”

ASEAN’s passport, the ASEAN Collective Investment Schemes Framework, was launched on 25 August 2014 by regulators in Malaysia, Singapore and Thailand.

The ASEAN Capital Markets Forum maintains a register of qualifying schemes. As retrieved on 13 October 2026, the register identified at least five home-approved funds that had not yet been offered across borders. The latest home approval among those funds was dated 15 November 2021.

Distribution points in the same direction. At the end of 2020, approximately 92% of foreign funds offered in Singapore, measured by number of funds, were domiciled in Luxembourg or Ireland.

Settlement infrastructure also lagged. At the end of 2020, only three ASEAN+3 economies surveyed by ADB – Indonesia, Japan and Korea – linked their fund-processing or securities-depository systems to central banks for delivery-versus-payment settlement.

Delivery versus payment links the transfer of securities to the corresponding cash payment, reducing the risk that one side performs while the other fails.

The ASEAN Capital Markets Forum began implementing initiatives under its Action Plan 2026-2030 at its 44th Chairs’ Meeting in the Philippines on 26 March 2026. It reported progress on the ASEAN Collective Investment Schemes Framework.

Other integration measures included ASEAN Diamonds, a proposed selection of well-governed regional companies, alongside studies of cross-listings, depositary receipts and ASEAN indices.

Francis Ed. Lim, chair of the ASEAN Capital Markets Forum in 2026 and chairperson of the Securities and Exchange Commission Philippines, said on 31 January that the forum was pursuing initiatives that “accelerate the integration of ASEAN’s financial ecosystems.”

AMRO includes the ASEAN Collective Investment Schemes Framework among regional initiatives that have yet to generate sufficient commercial scale. Product-based mechanisms may widen formal market access, but they do not by themselves resolve fragmented tax treatment, thin secondary-market liquidity, inconsistent investor protections or mismatched settlement cycles.

Even the Benchmark Leaks Savings to the US

Europe is an imperfect yardstick. The European Central Bank reported on 7 May 2026 that euro-area financial integration had improved markedly since late 2022. Equity integration, however, had declined. Cross-border equity investment within the euro area was stagnating, while a significant portion of equity investment continued to flow outside the European Union.

Christine Lagarde, President of the European Central Bank, described the problem at the 34th European Banking Congress in Frankfurt on 22 November 2024. Capital, she said, is either “trapped within national borders or leaves for the United States.”

Enrico Letta, the former Prime Minister of Italy, estimated that approximately EUR 300 billion of European household savings was diverted abroad each year, primarily to the United States. He made the estimate in his April 2024 report to the European Council.

Asia shows the same directional pull. AMRO finds that the United States is the largest outward portfolio-investment destination for almost every major ASEAN+3 economy when the data are assessed on an ultimate-investor basis.

European parity is therefore not the right target. The test is whether regional channels provide the settlement infrastructure, hedging instruments and domestic institutional-investor base required to make retaining capital within the region commercially rational.

ADB’s recommendations point in the same direction: strengthen the regional institutional-investor base, expand hedging instruments and promote regulatory harmonisation.

Vietnam shows why infrastructure still matters. Foreign investors were net sellers of Vietnamese equities between 1 June and 31 August. ADB reports that margin calls and forced selling associated with elevated margin lending exacerbated a sharp market correction in July. FTSE Russell’s reclassification of Vietnam from Frontier to Secondary Emerging market status became effective on 21 September 2026.

At a seminar on 2 June, the chairwoman of Vietnam’s State Securities Commission said the country’s central counterparty clearing mechanism was expected to become operational in the first quarter of 2027.

The ASEAN Capital Markets Forum’s current action plan runs to 2030. Until the pipes arrive, allocators should price the integration gap into their exit-liquidity assumptions. Treasurers should audit how much regional-currency funding depends on a single regional currency.

Thailand’s Cabinet approved a THB 15.5 billion national disaster insurance scheme on 15 September 2026. By 26 September, Bangkok had declared all 50 districts disaster-affected. The scheme was not due to take effect until 1 October. The flood did not wait.

By 5 October, Thailand’s Interior Ministry had confirmed 31 deaths across eight provinces. More than 3.5 million people remained affected nationwide, according to the Department of Disaster Prevention and Mitigation. The government approved more than THB 4.1 billion in emergency recovery funds.

That was roughly a quarter of the scheme’s THB 15.5 billion annual premium budget – not a quarter of its approximately THB 75 billion in total annual coverage.

Thailand is not an isolated case. During 14-20 September, when Thailand’s nationwide flood episode also began, the AHA Centre recorded flood, landslide or storm impacts in Indonesia, Malaysia, the Philippines and Vietnam. The records establish regional simultaneity, not a single shared weather system.

Each government is confronting catastrophe-financing arrangements built for losses that are becoming larger and more interconnected.

The Scheme That Missed Its Own Launch Window

Thailand’s government-funded scheme covers roughly 30 million homes against floods, windstorms and earthquakes. For flood damage, it provides an initial THB 10,000 and up to THB 90,000 more, capped at THB 100,000 per household per event. The Department of Disaster Prevention and Mitigation receives and disburses the budget, while the Office of Insurance Commission and Thai General Insurance Association select participating insurers.

The design uses public funds to purchase private insurance, transferring a defined layer of household catastrophe risk rather than relying only on post-event relief. That changes the state’s financing model and has direct implications for capacity, reinsurance and pricing across Thailand’s non-life sector. But coverage began only after the September flood event was under way.

Early loss estimates diverge because they use different periods and scopes. The University of the Thai Chamber of Commerce estimated THB 12.283 billion in disrupted economic activity from 25-29 September, equal to 0.066% of annual GDP; it excluded property, vehicle, inventory and agricultural damage.

A separate Rangsit University assessment put nationwide losses for 24-27 September at THB 16.896 billion-THB 33.793 billion, with Bangkok at THB 10.586 billion in its moderate scenario. “The flooding is expected to shave 0.3 percentage points off this year’s GDP growth,” said Associate Professor Aat Pisanwanich of Rangsit University’s Faculty of Economics, in Reuters on 28 September 2026.

Thailand’s 2011 floods set the benchmark for an uncovered loss. Swiss Re recorded insured losses of USD 15 billion against total economic losses of USD 46 billion, leaving USD 31 billion uninsured. In 2025, Thailand’s non-life direct premiums were THB 293.118 billion against GDP of THB 18.97 trillion, equivalent to approximately 1.5%.

The Coverage Question Nobody Has Closed Since 2011

The 2011 protection gap was not purely a penetration problem. Following southern Thailand’s late-2025 floods, Wotton Kearney revisited structural weaknesses first exposed in 2011. Many commercial policies paired broad direct property cover with contingent business interruption extensions written on a limited-perils basis.

Ian Johnston, managing partner for Thailand at Wotton Kearney, and his co-authors wrote on 8 December 2025 that those extensions covered “only fire, lightning and explosion.”

Flood losses at suppliers’ or customers’ premises therefore often did not trigger those contingent business interruption (CBI) extensions. Prevention-of-access disputes turned on whether the wording required physical damage to nearby property or extended to obstruction or interference. Many such extensions also capped indemnity at thirty days, while floodwaters in some locations in 2011 persisted for more than 90.

Wotton Kearney’s analysis was direct: the 2025 event revived coverage problems first exposed in 2011. For a commercial policyholder today, the questions remain. Does the CBI extension name flood as a covered peril? Does prevention-of-access wording extend beyond physical damage? Is the indemnity period long enough for a flood that does not recede in 30 days?

The Same September, Four Other Markets

Thailand’s flooding did not happen in isolation. The AHA Centre’s update for 14-20 September recorded floods and landslides in North Sumatra, West Sumatra and Aceh; impacts in Perak and Kuala Lumpur; flooding in Nueva Ecija; and floods or landslides across six Vietnamese localities.

These events overlapped with the national Thai flood episode that began on 16 September, but the source does not identify them as one weather system.

Malaysia’s exposure illustrates a different version of the same gap. Department of Statistics Malaysia case studies – not a census of all 2025 flood victims – found that only 5.5% of surveyed victims had insurance coverage. That leaves most household exposure outside formal risk transfer.

Total 2025 flood losses were RM 636.9 million, equivalent to 0.03% of nominal GDP. Public assets and infrastructure accounted for RM 380.2 million, the largest component, underscoring that the protection gap extends beyond households.

Each market is solving its own version of the problem on its own schedule. SEADRIF provides a regional platform and sovereign disaster-risk products, but its insurance results remain concentrated in Lao PDR; it does not yet pool household or corporate flood losses across these five markets.

What the Modelling Already Shows

Willis Towers Watson’s (WTW)Natural Catastrophe Review 2026 warned that flood losses in Southeast Asia could rise as much as tenfold. Its early indications suggest major regional events could exceed USD 10 billion, versus the USD 1 billion-USD 2 billion range typical over the past decade.

Losses “now propagate in more complex ways than our historical data or models were designed for,” said Christopher Au, head of WTW’s APAC Climate Risk Centre, in Green Central Banking on 16 February 2026. He identified urban expansion, rising asset values and interconnected systems as compounding drivers alongside climate change.

Aon’s 2026 Climate and Catastrophe Insight separately identified severe South and Southeast Asian flood losses as evidence of significant underinsurance.

That is the structural read beneath September’s headlines. Thailand built a national household scheme, but coverage started after the flood began. Unlike Thailand, Malaysia has no government-funded disaster insurance programme automatically covering households nationwide.

Flood cover remains largely optional, while the government provides post-disaster assistance. Indonesia, the Philippines and Vietnam faced separate flood events while the region’s sovereign risk-financing architecture remained limited in reach. Loss modelling is moving faster than coverage.

The Question for the Next Renewal Cycle

For insurers, reinsurers and corporate risk officers with ASEAN exposure, the test is not whether another flood comes. It plainly will. The test is whether catastrophe programmes, CBI wordings and national schemes still being built one market at a time can absorb that kind of loss.

In September, the AHA Centre recorded flood-related events across all five markets; financial protection remained mostly national and uneven.

ASEAN trade ministers closed the 29th ASEAN Investment Area Council Meeting in Pasay City on 21 September 2026 with a record figure. Foreign direct investment reached USD 243.9 billion in 2025, up 9.7% from USD 222.3 billion in 2024. It marks a fifth consecutive year above USD 200 billion and 15% of global FDI inflows.

The headline number is not the story. Behind it sit three sovereign wealth funds, one Hong Kong-listed exchange-traded fund and a second bond ETF still in development. Together they begin to build channels through which institutional investors can access China-ASEAN growth: direct private-equity deployment on one side, listed equity exposure on the other.

For fund managers, the infrastructure question now matters more than the inflow figure itself.

The Number Behind the Number

Intra-ASEAN investment rose to almost USD 40 billion in 2025, Philippine Trade Undersecretary Ceferino Rodolfo confirmed at the meeting. Regional GDP grew 4.9% in 2025 and is projected at 4.5% in 2026, against 3.0% global growth, according to the ministers’ joint statement.

Merchandise trade expanded 13.7% to USD 4.4 trillion; services trade grew 7.5% to USD 1.4 trillion. The ministers reframed the mandate explicitly: from chasing investment volume to chasing investment quality. Priority sectors named include biofuels, medical devices, solar photovoltaic equipment, carbon capture and veterinary healthcare.

Philippine Trade Secretary Cristina Roque, this year’s ASEAN chair, addressed that shift at a press briefing in Manila on 19 September 2026. The reframing “creates both pressure and opportunity for ASEAN,” she told reporters, calling the region “one of the brightest economic powerhouses on Earth.”

That ambition needs a delivery mechanism. Three sovereign funds and two ETFs launched this year are the closest thing ASEAN capital markets have to one.

Sovereign Capital Built Its Own Platform

China Investment Corporation, Indonesia Investment Authority and Azerbaijan’s State Oil Fund jointly established the Galaxy Orientis China-ASEAN Investment Platform on 17 April 2026. It reached a first close of approximately USD 520 million against a USD 1 billion target.

CGS International, the overseas arm of China Galaxy Securities, serves as general partner, providing regional deal-sourcing and operational infrastructure. The platform’s limited partners are not small. CIC reported USD1.57 trillion in total assets at end-2024; INA and SOFAZ bring additional sovereign capital and regional networks to the platform. Target sectors span industrial, healthcare, consumer, business services and technology.

“CIC, together with our partners INA and SOFAZ, is launching the Galaxy Orientis China-ASEAN Investment Program based on our firm optimism about ASEAN’s economic growth prospects,” said Zhang Qingsong, Chairman and CEO of CIC, in an official joint press release issued by the three sovereign funds on 17 April 2026.

The platform was announced with a USD520 million first close and a USD1 billion target.

The Exchange-Traded Instruments Following the Money

Private capital is one channel. Public markets are the other. The Galaxy Bosera MSCI China ASEAN Economic Linkage Select Index ETF listed on the Hong Kong Stock Exchange on 28 January 2026. Bosera Asset Management (International) and China Galaxy International Asset Management co-manage it.

The fund tracks the MSCI China ASEAN Economic Linkage Select Index. It combines Hong Kong-listed southbound stocks with high ASEAN economic exposure and stocks in the MSCI AC ASEAN Index with high exposure to Hong Kong and China. The two components are reset to 65% and 35%, respectively, at each rebalance. The ASEAN component covers Singapore, Indonesia, Malaysia, the Philippines and Thailand; it does not include Vietnam.

“China-ASEAN collaboration has entered a new era,” said Zhang Dong, President of Bosera Asset Management, in remarks at the ETF’s listing ceremony on the Hong Kong Stock Exchange on 28 January 2026.

A second instrument is still being built. CGS International, the Industrial and Commercial Bank of China and the China Foreign Exchange Trade System are developing it jointly.

The target is the first offshore-renminbi bond ETF focused on Belt and Road-linked debt, not yet launched. CGS International Group CEO Carol Fong confirmed the plan in comments reported by IFR at the September summit.

“China-ASEAN flows are already happening,” Fong told IFR. The opportunity now, she said, is to make them “more transparent, more investible, more scalable.”

What the Plumbing Means for Everyone Else

A policy layer sits beneath the financial-instrument layer, and it is not yet finished either. ASEAN and China signed the Free Trade Area 3.0 Upgrade Protocol in Kuala Lumpur on 28 October 2025. The protocol expands cooperation across nine areas, including digital and green economy, supply-chain connectivity, competition and consumer protection, and support for micro, small and medium-sized enterprises.

Seven ASEAN member states had completed domestic ratification procedures by August 2026. China had not. Once China finishes its own process, the protocol takes effect within 60 days. Both sides are targeting the November 2026 ASEAN-China Summit to mark it in force.

Record FDI, a sovereign-backed private equity platform, two exchange-traded funds and an unratified trade upgrade are not four separate developments. They form a single pattern: ASEAN’s capital-markets plumbing catching up to its trade and investment volume.

That matters directly for cost of capital and liquidity. It determines whether institutional investors can buy diversified, tradeable exposure to the region, rather than negotiating bilateral access deal by deal through government channels alone.

The Close

The test for whether this becomes durable infrastructure rather than a cluster of announcements is threefold. Does CAIP reach its full USD 1 billion target. Does the Belt and Road bond ETF actually launch. Do trading volumes in the Galaxy Bosera ETF show sustained investor demand rather than novelty interest.

ASEAN is plainly attracting record capital. Whether the market infrastructure to access that growth efficiently, at scale, has caught up to the capital itself is the open question. Every allocator with regional exposure now has to answer it for their own portfolio.

The 2026 Philippine CEO Survey, conducted by Isla Lipana & Co./PwC Philippines with the Management Association of the Philippines, surveyed 176 CEOs and senior business leaders across industries in the Philippines. Some 83% expressed confidence in their industry’s 12-month outlook and 81% expect revenue growth.

The same respondents cited regulatory uncertainty and climate change at 93% each, geopolitical conflict at 92%, technology disruption at 85%, and supply-chain constraints and skills shortages at 84% each.

That is not a contradiction. A company can see opportunity in the Philippine economy while recognising the operating environment has become harder to read. The more useful question is what happens when these risks stop arriving one at a time.

The Risks Stopped Arriving One at a Time

Corporate risk management typically sorts exposure into categories: geopolitical, financial, operational, cyber, supply chain, regulatory, climate, technology, talent. Each gets its own owner and its own line in the annual report. Actual disruptions rarely respect those categories.

A geopolitical conflict raises oil prices. Higher oil prices raise electricity, transport and logistics costs. Higher operating costs compress margins and consumer demand. Slower demand pushes companies toward automation to protect productivity, which deepens dependence on AI, cloud infrastructure and the cybersecurity, data governance and skills base that dependence requires.

A geopolitical shock ends as a technology-and-talent problem, several steps removed from where it started.

The World Bank’s August 2026 assessment identifies two compounding shocks weighing on the economy: policy uncertainty and a surge in global energy prices. The Bank held its 2026 growth forecast at 3.7%, down from 4.4% in 2025. Headline inflation averaged 4.8% in the first half, driven largely by energy costs.

Energy Is Where the Chain Starts

The clearest evidence of convergence sits in the energy system, because the Philippines is a net importer of petroleum products and remains exposed to global fuel markets.

After hostilities involving the United States, Israel and Iran began on 28 February 2026, the Strait of Hormuz, a critical corridor for global oil shipments, was closed to shipping. On 24 March 2026, President Ferdinand Marcos Jr declared a state of national energy emergency under Executive Order No. 110.

Initial Independent Electricity Market Operator of the Philippines (IEMOP) simulations indicated that the Wholesale Electricity Spot Market (WESM) supply could exceed PHP9/kWh, compared with pre-conflict average WESM prices of PHP5/kWh or less.

For energy-intensive businesses, a WESM price spike can feed into procurement and tariff costs, depending on their supply contracts and exposure to spot-market pricing. It is an input-cost risk that can move faster than annual budgeting cycles can absorb.

The World Bank’s June 2026 financing package for Philippine energy and water security linked affordable, reliable electricity directly to business growth and investment, while highlighting reduced exposure to global fossil-fuel price shocks as a resilience priority.

The IMF’s 2026 assessment of Asia’s exposure to the same shock found the effects running through inflation, external balances and narrower monetary policy space, with knock-on disruption to fertiliser and petrochemical supply chains.

Its Philippines Article IV consultation separately named heightened geopolitical tension a downside risk precisely because it generates commodity volatility that reaches confidence, investment, tourism, trade and supply chains simultaneously, and can quickly move beyond the government-affairs function that first identifies it.

AI Adoption Is Compressing Several Risks Into One

More than eight in 10 surveyed CEOs have incorporated AI into their strategic or business plans, up from 68% a year earlier, and 79% have begun implementing AI initiatives. Read against the same survey’s 85% concern about technology disruption, 84% about skills shortages and 82% about cyber risk, AI adoption is not one more item on the risk register. It is the mechanism connecting several existing ones.

AI adoption requires specialist skills. Meeting that gap increases dependence on external providers and platforms. Platform dependence raises cybersecurity and data-governance exposure, which intersects directly with regulatory compliance, a concern already topping the survey at 93%.

In July 2026, President Marcos signed Executive Order 119, updating government data classification and establishing a risk-based data residency framework for government data, against a backdrop of expanding cloud and AI infrastructure. The 2026 Strategic Investment Priority Plan identifies cybersecurity, artificial intelligence and data science among its priority activities.

Meeting rising compute demand also raises electricity consumption, looping the chain back to the energy exposure above. The IMF has separately warned that AI and cloud dependency can create concentration risk, where an outage or breach at a single critical provider affects multiple institutions at once.

The Philippines is expanding its AI infrastructure regardless: its AI+ Infrastructure Masterplan 2026–2033 targets a 30-fold expansion in AI data-centre capacity, from a 50MW baseline to 1.5GW by 2033.

The binding constraint on all of this may increasingly be execution rather than capital. Skills shortages sit at 84% in the same survey, and the IMF’s Philippines assessment identifies skills development as central to digitalisation, including the exposure this creates for the country’s outsourcing sector.

The constraint is organisational: whether a company can recognise an interconnected risk quickly enough to act before the chain reaction it triggers has run its course.

Five Questions Replace the Old Risk Register

The shift for boards is from listing risks independently to interrogating how they interact. Five questions can reveal what a conventional risk matrix may miss:

1. Where are the critical dependencies across energy, suppliers, cloud, data, logistics, geography, financing and talent?
2. Which risks amplify each other when two or three materialise together?
3. What happens to unit economics under simultaneous stress from energy prices, currency movement, supply disruption and higher financing costs?
4. Where is transformation creating new dependencies, particularly through AI and cloud?
5. Which investments improve growth and resilience at the same time, rather than trading one for the other?

None of this replaces conventional risk management. It reorganises it around connections a category-based register cannot see.

Where the Convergence Becomes an Advantage

The Philippines is not short of policy momentum to work with. Digital infrastructure, AI, renewable energy, semiconductor investment and the Luzon Economic Corridor all sit inside the same growth agenda the government has set out.

Companies that understand interconnected risk can do more than limit exposure. The same visibility that helps them prepare for compounding shocks can also improve how quickly they identify and act on opportunities.

The Philippines is not facing one defining business risk. It is facing an environment in which geopolitics, energy, technology and talent increasingly move together. The question for management is no longer simply which risks are biggest. It is which risks amplify each other, and what happens when several land at once.

Indonesia signed Government Regulation No. 33 of 2026 on 16 July 2026 – the long-awaited implementing rule for the country’s 2022 Personal Data Protection Law. It circulated publicly only in late August. The regulation fills in detail on cross-border data transfers, breach notification and impact assessments that businesses had navigated without since the law took effect in October 2024.

It does not complete the picture. Article 58 of the 2022 law calls for a dedicated authority to oversee personal data protection. As of September 2026, that authority has yet to be formally established.

Deputy Minister of Communication and Digital Affairs Nezar Patria said in July, at a US-ASEAN Business Council dinner in Jakarta, that the agency will “operate independently across all its structures.” The presidential regulation establishing it is still being finalised.

The Capital Is Already Moving

The investment cycle is not waiting. Indonesia currently has around 580 megawatts of operational data-centre capacity. Coordinating Minister for Economic Affairs Airlangga Hartarto said, as reported by the Jakarta Post on 12 July 2026, that investors had expressed interest in another 1.3 gigawatts. That represents an estimated USD 15–20 billion in additional investment.

Some of that is already committed. Firmus Technologies, working with Nvidia, is developing a 360-megawatt AI Factory campus in Batam designed for up to 170,000 Nvidia accelerators. Offtake agreements, Firmus says, could generate USD 25–30 billion over six years. EDGNEX has separately committed USD 2.3 billion to a 144-megawatt facility in Cikarang.

Where Digital Growth Meets Governance

 

Two cybersecurity leaders from Indonesia interviewed for this piece describe the same commercial dynamic playing out across Indonesian enterprises. Ardi Sutedja K., chairman of the Indonesia Cyber Security Forum, frames it as a question of pace at the enterprise level.

“In my experience, one of the most significant gaps lies in the speed at which organisations are investing in AI and cloud technologies versus the pace at which their security governance is maturing. Many Indonesian enterprises are quick to adopt new technologies, driven by the promise of increased efficiency and competitive advantage.

“However, the same urgency is not always applied to developing robust security frameworks. This often results in a reactive rather than proactive approach to cyber security, where measures are only put in place after a breach has occurred,” he explained.

Sugiarto RM, founder of the Indonesia CXO Network, sees it playing out across the wider economy.

“Indonesia already has a growing regulatory framework around personal data, critical information infrastructure and financial-sector cyber resilience, while enterprises are simultaneously increasing spending on cloud, AI and digital infrastructure. The challenge is making sure those two curves converge.”

The National Cyber Security Index provides another indication of the governance challenge. Indonesia scores 47.50, receiving full credit for having personal data protection legislation while scoring zero on the indicator for an empowered personal-data protection authority.

The result highlights the distinction between having a regulatory framework on paper and having the institutional capacity to enforce it.

Banks Already Know What Governance Looks Like

The clearest contrast is financial services. Indonesian banks sit inside a supervisory framework where technology governance and cyber maturity are binding requirements, not aspirations.

OJK Regulation 11/2022 established IT-governance rules for commercial banks. SEOJK 29/2022 added annual cyber-maturity assessments. POJK 1/2026, effective since 1 March 2026, tightened information-technology and third-party risk requirements further.

Philip Lee, head of Orange Cyberdefense APAC, told Bizruption.asia that this is the point at which cybersecurity stops being an IT problem and becomes a board one.

“This shift is increasingly driven by the evolving threat landscape, regulatory compliance and growing pressure from shareholders and local governments. With increased regulatory requirements around data protection, critical infrastructure, incident reporting, and cybersecurity governance, boards have become more engaged with the organisation’s operational environments.

“A major cyber incident or compliance failure can directly affect revenue, business continuity, reputation, customer trust and legal exposure. Translating technical risks into business outcomes helps boards understand their risk appetite and accountability. As cybersecurity becomes integrated into enterprise risk management, it is increasingly recognised as a strategic business resilience issue rather than simply an IT expense,” he said.

Banking has a mechanism for making that translation visible. The question for the rest of Indonesia’s digital economy is how the same discipline can develop as the data centres, cloud platforms and AI ventures now absorbing its investment wave continue to scale.”

What Actually Closes the Gap

Ardi frames the work ahead as cultural before it is technical.

“There must be a cultural shift within organisations where cyber security is viewed as a shared responsibility. This involves continuous education and awareness programs to ensure that every employee understands their role in protecting the organisation’s digital assets.”

Sugiarto describes the practical work still outstanding.

“The corresponding governance layer, who owns the risk, how data is classified, what can be put into an AI model, how third-party and cloud risks are assessed, how identities and access are controlled, and how quickly an organisation can recover from a compromise, is often still catching up.”

The measure that matters, Sugiarto added, is not the size of the security budget. It is whether the board understands the cyber risk it is buying, accepting or transferring. Asked what would close the gap, he ranks the constraints directly.

“Regulation is the catalyst, budget is the enabler, talent is the constraint, but governance and accountability are what will actually close the gap.”

That ranking matters for how capital gets allocated. A regulation can set the obligation and a budget can fund the response, but neither guarantees that someone at the top of the organisation is accountable when the controls fail. That accountability is what boards and investors are now being asked to underwrite.

The USD 15–20 billion now moving into Indonesian data centres is part of a much broader digital transformation. As the country’s infrastructure, AI adoption and digital economy continue to expand, the evolution of governance and accountability will become increasingly important to the companies, boards and investors participating in that growth.

For investors, understanding how governance develops alongside that opportunity will be an increasingly important part of the decision-making process.

The Asia Pacific Loan Market Association held its first Dubai conference in January 2026, drawing roughly 300 attendees, nearly half from outside the region. Asian banks had extended more than USD 17 billion to Gulf borrowers in 2025, a record and roughly triple the 2024 total. The Gulf expansion came as Asia-Pacific syndicated lending outside Japan entered one of its weakest periods in more than a decade.

Home markets were shrinking. The Gulf was absorbing the capital instead. That trajectory lasted barely five weeks. After the United States and Israel struck Iran on 28 February 2026, Asian lenders did more than reassess Gulf exposure. New deal discussions and Asian-balance-sheet participation slowed sharply.

The Freeze Had Names Attached

By the time APLMA members regrouped in Hong Kong in March, the market conversation had inverted. HSBC Holdings and Standard Chartered, two of Asia’s largest loan arrangers, told some Middle East clients that transactions drawing on Asian balance sheets would need to pause.

A major Singapore bank shelved its 2026 Middle East expansion plans and redirected its Hong Kong team towards South Korea and Australia.

One major Chinese bank went further, restricting a drawdown on a bilateral facility involving the Abu Dhabi government. People familiar with the matter described the move as rare. Hong Kong-based bankers at multiple institutions were required to provide daily updates to headquarters on regional loan exposure.

Taiwanese banks, previously among the most aggressive lenders to Gulf borrowers, stopped taking new exposure. “It is still far too early for us to reopen balance sheets to Gulf names,” a senior Taiwanese banker said.

The Capital Had Nowhere Else to Go

Five months later, the freeze began to thaw, though not because the conflict ended. Qatar National Bank, Boubyan Bank and Kuwait’s sovereign wealth fund secured financing involving Asian lenders in August 2026.

Saudi Energy Co, the state utility formerly known as Saudi Electricity, entered talks for a USD 300 million facility expected to be anchored by a major Chinese lender. Together, the transactions and financing requests in motion exceeded USD 6.8 billion, though the amount ultimately funded remained unclear.

The return did not signal broad confidence in Gulf risk. Asia-Pacific syndicated lending outside Japan had entered its deepest slump in 16 years, leaving banks with fewer opportunities to deploy large pools of capital. That made selective Gulf transactions more consequential, not automatically safer.

Gary Ng, senior economist at Natixis, said banks would continue to lend “more cautiously and to selected clients.” They also had “an incentive to protect the relationships” built in the Gulf.

The August deals point to selective franchise preservation: banks are keeping access to established borrowers while limiting the risk they hold directly.

A third view is that the freeze was always temporary. Tatsuya Hasegawa of Sumitomo Mitsui called the pullback “largely cyclical” and said investors would return “absent any major disruptive events.”

His colleague Yuji Harada said communication with Middle East borrowers had slowed rather than stopped, with financing moving forward “once the timing aligns.”

The Exposure Is Not What It Was

The clearest evidence of selective re-entry sits inside the deal structures. In the Kuwait Investment Authority financing, Asian lenders including China Construction Bank and Korea Development Bank accounted for roughly 30% of total lending. A year earlier, Riyad Bank SJSC’s USD 1.5 billion loan drew 34 participating banks, all from Asia.

This is not a return to the 2025 model. Asian banks extended USD 2.3 billion to Gulf borrowers through August 2026, down 72% from the same period in 2025. The difference is not only volume. It is also the share of risk Asian banks are willing to retain in each transaction.

A proposed USD 7 billion financing for infrastructure projects in Syria shows how credit enhancement may compensate for political risk that lenders are less willing to hold directly.

Bloomberg reported that Qatar National Bank, Abu Dhabi Commercial Bank and JPMorgan were involved in arranging financing for projects linked to Qatar’s Power International Holding.

IFR reported that Gulf lenders were seeking wider compensation for renewed political and liquidity risk, including an additional 50 to 60 basis points in some cases. The signal is not that guarantees eliminate war risk. It is that lenders are demanding a clearer allocation of who holds it.

What the Headline Number Misses

A headline announcing that Asian banks have restarted Gulf lending should not be read as proof that Iran-related risk has been priced out. Deal-level evidence instead points to case-by-case underwriting, lower participation and internal exposure guardrails that bankers say have remained in place since the conflict began.

The forward signal is not the USD 6.8 billion in requests. It is the participation ratio inside each deal that closes. A Gulf borrower attracting a broad Asian syndicate again, at the scale Riyad Bank achieved in 2025, would be stronger evidence that risk appetite is normalising.

Asian banks are not lending into this war because the risk has passed. They are lending into it because they have found ways to make someone else hold that risk instead: a Qatari guarantor, a smaller slice of the syndicate, a wider spread charged to the borrower.

That is not a return to 2025 confidence. It is caution that has found a business model.